StartHook
StopHook
Behavioral task
behavioral1
Sample
c198c666d55429a30b3a40936e8a1bd1172f39adfecf77d8f97e15a1aefe3be8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c198c666d55429a30b3a40936e8a1bd1172f39adfecf77d8f97e15a1aefe3be8.dll
Resource
win10v2004-20220812-en
Target
c198c666d55429a30b3a40936e8a1bd1172f39adfecf77d8f97e15a1aefe3be8
Size
29KB
MD5
33827daa33a3816fb366e881358de739
SHA1
1dea963673c38c9e9ece40a225a7a99271c10066
SHA256
c198c666d55429a30b3a40936e8a1bd1172f39adfecf77d8f97e15a1aefe3be8
SHA512
737fb762ab423449a715a226e1a6335c4224c3b79c1435af453182dbe8903e1669f043a1557afd7a9a058e83682494aadc6c23be9d7e2c9049009687b4fa5d9d
SSDEEP
768:gw5Ixx//t3+zAlM5BaXWU7BC+MK++U/cjCmp:g8IxXtrUab+B/1m
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
StartHook
StopHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ